Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          2l1agWVUalvlFotY4x5O7YqykXSPMCNIxg50ITJsC5c=
Subject key identifier:   C0:BF:FF:E7:9F:FC:AA:46:06:CB:81:D7:77:C6:10:5D:4B:CD:56:8F
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       48BF110E4CCF876C8C4FD53348AF4F16130F21D8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:31 +0000
ROA not before:           Mon 26 Sep 2022 07:56:31 +0000
ROA not after:            Mon 25 Sep 2023 08:01:31 +0000
asID:                     59282
IP address blocks:        2400:d680:139::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bf:11:0e:4c:cf:87:6c:8c:4f:d5:33:48:af:4f:16:13:0f:21:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:31 2022 GMT
            Not After : Sep 25 08:01:31 2023 GMT
        Subject: CN=C0BFFFE79FFCAA4606CB81D777C6105D4BCD568F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dc:70:dc:ec:50:9e:46:54:b4:fd:39:22:1e:
                    ba:68:dc:e8:8d:ef:02:d6:e8:86:ed:d5:dd:5b:e9:
                    57:ae:4c:b6:9a:67:a8:51:0b:59:cd:b8:b2:2b:76:
                    ee:ed:68:a9:2e:f9:ed:89:e3:4d:ca:63:2f:7b:5c:
                    f3:5f:f2:4d:f3:12:55:ae:24:13:a2:7b:f0:49:fa:
                    1a:b5:6c:70:6b:db:42:bd:d9:b2:9a:bc:d7:ea:2e:
                    5c:87:ef:86:16:45:2a:1e:cf:e0:77:07:45:3e:8e:
                    23:26:f6:70:c1:ef:65:f0:94:13:50:2f:14:52:7d:
                    7f:d1:d2:ab:f9:e5:b0:6b:ef:d7:24:b9:75:b4:9d:
                    30:23:61:3f:cd:c3:3a:5f:53:47:af:22:81:35:fb:
                    92:06:53:a0:0c:b1:26:13:83:52:2f:29:56:c3:fd:
                    26:fe:16:e0:4d:76:d5:ba:70:72:c2:c9:45:8d:8f:
                    aa:19:55:01:47:b2:51:8e:a6:d4:4c:17:30:fb:e8:
                    33:ee:16:04:88:21:3f:b5:78:ee:3a:20:b5:8a:25:
                    c6:d5:89:83:77:ce:24:7c:8f:e1:56:92:2c:72:18:
                    a8:d1:03:1a:0c:a2:58:7e:15:17:56:6e:5e:42:e9:
                    3f:90:a5:39:02:81:10:78:98:fa:9b:08:66:7a:53:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BF:FF:E7:9F:FC:AA:46:06:CB:81:D7:77:C6:10:5D:4B:CD:56:8F
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:139::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:be:e9:73:77:e7:c3:a0:d5:0d:65:ba:91:1d:09:2b:bc:
         24:6e:bc:b5:22:f6:69:cb:2b:52:e4:6d:ef:5a:4b:17:43:c7:
         37:b6:ff:c1:ca:14:b8:62:62:02:f8:07:ad:f6:25:66:7e:d7:
         0e:55:d5:82:fe:99:c8:1d:39:67:cf:ae:f4:69:57:ff:05:47:
         fc:09:bc:5f:e2:c7:c2:aa:ba:96:1e:f9:7f:3c:bb:b7:50:f9:
         60:6b:e6:0c:35:aa:cd:21:02:40:94:65:82:cb:8c:63:9c:00:
         cd:74:d6:7e:59:03:69:94:1e:e4:b9:17:a1:45:8d:d9:9a:5b:
         01:e6:27:ec:86:d5:c0:0d:14:63:03:d7:2b:e9:33:3a:dc:e5:
         3f:53:57:9b:49:38:fa:2c:7b:a3:c2:5a:e0:37:e6:53:c2:31:
         05:14:47:23:93:c1:9e:ab:e4:74:64:92:54:74:5d:94:0d:57:
         43:85:54:bd:51:52:8e:6e:c0:fd:93:a9:38:a6:de:74:b4:b8:
         28:c3:75:70:dc:d0:03:ce:13:1d:e1:6a:36:12:b6:fe:f0:e5:
         11:35:69:3a:51:02:a7:20:6a:81:d5:8d:a2:fa:f3:a7:13:cd:
         59:ee:2d:cb:c4:0b:c1:36:d6:40:7e:53:c5:b3:1c:2c:1c:45:
         7a:83:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org